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ABSTRACT 

Certain notorious nonlinear binary codes contain more codewords than any known linear code. 
These include the codes constructed by Nordstrom-Robinson , Kerdock, Preparata, Goethals, 
and Delsarte-Goethals . It is shown here that all these codes can be very simply constructed as 
binary images under the Gray map of linear codes over Z4, the integers mod 4 (although this 
requires a slight modification of the Preparata and Goethals codes) . The construction implies 
that all these binary codes are distance invariant. Duality in the Z4 domain implies that the 
binary images have dual weight distributions. The Kerdock and 'Preparata' codes are duals 
over Z4 — and the Nordstrom-Robinson code is self-dual — which explains why their weight 
distributions are dual to each other. The Kerdock and 'Preparata' codes are Z4-analogues 
of first-order Reed-Muller and extended Hamming codes, respectively. All these codes are 
extended cyclic codes over Z4, which greatly simplifies encoding and decoding. An algebraic 
hard-decision decoding algorithm is given for the 'Preparata' code and a Hadamard-transform 
soft-decision decoding algorithm for the Kerdock code. Binary first- and second-order Reed- 
Muller codes are also linear over Z4, but extended Hamming codes of length n > 32 and the 
Golay code are not. Using Z4-linearity, a new family of distance regular graphs are constructed 
on the cosets of the 'Preparata' code. 
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I. Introduction 

Several notorious families of nonlinear codes have more codewords than any compara- 
ble linear code presently known. These are the Nordstrom-Robinson , Kerdock, Preparata , 



Goethals and Delsarte-Goethals codes |ig], |2|], |3|], |4|], [|6[, ||], Q. Besides their 



excellent error-correcting capabilities these codes are remarkable because the Kerdock and 
Preparata codes are 'formal duals', in the sense that although these codes are nonlinear, the 
weight distribution of one is the Mac Williams transform of the weight distribution of the other 
| [56| , Chap. 15]. The main unsolved question concerning these codes has always been whether 
they are duals in some more algebraic sense. Many authors have investigated these codes, and 
have found that (except for the Nordstrom-Robinson code) they are not unique, and indeed 
that large numbers of codes exist with the same weight distributions O], [O, O], ffl], p5[. 



1 54]. Kantor j^] declares that the "apparent relationship between these [families of codes] is 
merely a coincidence." 

Although this may be true for many versions of these codes, we will show that, when 
properly defined, Kerdock and Preparata codes are linear over Z4 (the integers mod 4), and 
that as Z4-codes they are duals. They are in fact just extended cyclic codes over Z4. 



**The work of A. R. Hammons, Jr. and P. V. Kumar was supported in part by the National Science Foundation 
under Grant NCR-9016077 and by Hughes Aircraft Company under its Ph.D. fellowship program. 
§P. Sole thanks the DIM ACS Center and the IEEE for travel support. 



The version of the Kerdock code that we use is the standard one, while our version of 
the Preparata code differs from the standard one in that it is not a subcode of the extended 
Hamming code but of a nonhnear code with the same weight distribution as the extended 
Hamming code. Our 'Preparata' code has the same weight distribution as Preparata's version, 
and has a similar construction in terms of finite field transforms. In our version, the Kerdock 
and 'Preparata' codes are Z4-analogues of first-order Reed-Muller and extended Hamming 
codes, respectively. Since the new construction is so simple, we propose that this is the 'correct' 
way to define these codes. 

The situation may be compared with that for Hamming codes. It is known that there are 
many binary codes with the same weight distribution as the Hamming code — all are perfect 



single-error correcting codes, but one is distinguished by being linear (see [^, |Q, |Q and 
also §5.4). Similarly, there are many binary codes with the same weight distributions as the 
Kerdock and Preparata codes; one pair is distinguished by being the images of a dual pair of 
linear extended-cyclic codes over Z4. It happens that Kerdock picked out the distinguished 
code, although Preparata did not. 

Kerdock and Preparata codes exist for all lengths n = 4"^ > 16. At length 16 they coincide. 



giving the Nordstrom-Robinson code [58|, The Z4 version of the Nordstrom- Robinson 



code turns out to be the 'octacode' |^, a self-dual code of length 8 over Z4 that is used 
when the Leech lattice is constructed from eight copies of the face-centered cubic lattice. 

The very good nonlinear binary codes of minimal distance 8 discovered by Goethals pl| , 
||3^ , and the high minimal distance codes of Delsarte and Goethals [^], also have a simple 
description as extended cyclic codes over Z4, although our 'Goethals' code differs slightly from 
Goethals' original construction. 

The decoding of all these codes is greatly simplified by working in the Z4-domain, where 
they are linear and it is meaningful to speak of syndromes. Decoding the Nordstrom-Robinson and 
'Preparata' codes is especially simple. 

These discoveries came about in the following way. Recently, a family of nearly optimal 
four-phase sequences of period 2^'""''^ — 1, with alphabet {1, i, —1, —i}, i = was discovered 

by Sole [^] and later independently by Bozta§, Hammons and Kumar 0]. By replacing 
each element z° by its exponent a € {0, 1, 2, 3}, this family may be viewed as a linear code over 
Z4. Since the family has low correlation values, it also possesses a large minimal Euclidean 
distance and thus has the potential for excellent error-correcting capability. 
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When studying these four-phase sequences, Hammons and Kumar and later independently 
Calderbank, Sloane and Sole noticed the striking resemblance between the 2-adic (i.e. base 2) 
expansions of the quaternary codewords and the standard construction of the Kerdock codes. 
The reader can see this for himself by comparing the formulae on page 1107 of |^] (the common 
starting point for the two independent discoveries) and page 458 of [^ ]. 

Both teams then realized that the Kerdock code is simply the image of the quaternary code 
(when extended by an zero-sum check symbol) under the Gray map defined below (see ([l5|)). 
This was a logical step to pursue since the Gray map translates a quaternary code with high 
minimal Lee or Euclidean distance into a binary code of twice the length with high minimal 
Hamming distance. 

The discovery that the quaternary dual gives a code which is the 'correct' definition of the 
'Preparata' code followed almost immediately. 

The two teams worked independently until the middle of November 1992, when, discovering 
the considerable overlap between their work, they decided to join forces. The discoveries about 



the Kerdock and Preparata codes are in a paper presented by Hammons and Kumar at the 



International Symposium on Information Theory (San Antonio, January 1993, but submitted 



in June 1992), in Hammons' dissertation [34|, and in a manuscript [^9[ (now replaced by the 
present paper) submitted in early November 1992 to these Transactions. Hammons and Kumar 
realized in June 1992 that the Z4 Kerdock and 'Preparata' codes could be generalized to give 
the quaternary Reed-Muller codes QRM{r, m) of Section 5.4. 

In late October 1992, Calderbank, Sloane and Sole submitted a research announcement 
(now replaced by ||ll|) to the Bulletin of the American Mathematical Society, also containing 
the discoveries about the Kerdock and Preparata codes, as well as results (Sections 2.6 to 
2.8) about the existence of quaternary versions of Reed-Muller, Golay and Hamming codes. 
They discovered the quaternary versions of the Goethals and Delsarte-Goethals codes in early 
November. 

The present paper is a compositum of all our results. 

The discovery that the Nordstrom-Robinson code is a quaternary version of the octacode 
was made by Forney, Sloane and Trott in early October 1992, and is described in [^0[. (It was 
already known to Hammons and Kumar in June 1992 that the Nordstrom-Robinson code was 
linear over Z4, but they had not made the identification with the octacode.) 

It can be shown that the binary nonlinear single-error-correcting codes found by Best Q, 
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Julin |^2[, Sloane and Whitehead I^S] and others can also be more simply described as codes 
over Z4 (although here the corresponding Z4-codes are nonlinear). This will be described 
elsewhere ||2^. Large sequence families for code-division multiple-access (CDMA) that are 
supersets of the near optimum four-phase sequence families described above and which are 
related to the Delsarte-Goethals codes are investigated in [^ ]. 

The paper is arranged as follows. Section II discusses linear codes over Z4, their duals, 
and their images as binary codes under the Gray map. Necessary and sufficient conditions are 
given for a binary code to be the image of a linear code over Z4. Reed-Muller codes of length 
2"* and orders 0, 1, 2, m — 1, m satisfy these conditions, but extended Hamming codes and the 
Golay code do not. Cyclic codes over Z4 are studied by means of Galois rings GR{A"^) rather 
than the Galois fields GF{2'^) used to analyze binary cyclic codes, and Section III is devoted 
to these rings. 

In Section IV we show that Kerdock codes are extended cyclic codes over Z4, and in fact 
are simply Z4-analogues of first-order Reed-Muller codes (see the generator matrix (^9|) and 
also §5.4). The Nordstrom- Robinson code is discussed in §4.5. Subsequent subsections give 
the weight distribution of the Kerdock codes and a soft-decision decoding algorithm for them. 

In Section V we show that the binary images of the quaternary duals of the Kerdock codes 
are Preparata-like codes, having essentially the same properties as Preparata's original codes. 



Theorem 15, however, shows that the 'Preparata' codes are strictly different from the original 
construction. §5.2 provides a finite field transform characterization of the 'Preparata' codes 
and compares them with the original codes. The 'Preparata' codes have a very simple de- 
coding algorithm (§5.3). (This is considerably simpler than any previous decoding algorithm 
— compare [||.) Section 5.4 defines a family of quaternary Reed-Muller codes QRM{m,r) 
which generalizes the quaternary Kerdock and 'Preparata' codes. The final subsections are 
concerned with the automorphism groups of these codes (§5.5), and a new family of distance 
regular graphs defined on the cosets of the 'Preparata' code (§5.6). 

In Section VI we show that the binary nonlinear Delsarte-Goethals codes [p8|| are also 



extended cyclic codes over Z4, and that their Z4-duals have essentially the same properties as 



the Goethals codes |31], |32] and the 'Goethals-Delsarte' codes of Hergert |4C]. 



Postscript. After this paper was completed, V. I. Levenshtein drew our attention to an article 
by Nechaev |5^]. In this article Nechaev considers the quaternary sequences {cf} given (in the 
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notation of the present paper) by 

Q = (-i)*{r(Ae*) + 5} , 

<t < 2™-+^ — 3, \ € R, 5 £ Z4, and their 2-adic expansions q = at + 2bt, where at, h € {0, 1}. 
The principal result of |57] shows that the set of {bt} is a nonlinear binary cyclic code which 



is equivalent to the binary Kerdock code punctured in two coordinates. However, [57| makes 
no mention of the fundamental isometry of Eq. (p^), nor of Preparata codes and the sense in 
which they are duals of Kerdock codes. 

II. Quaternary and related binary codes 
2.1. Quaternary codes. 

By a quaternary code C of length n we shall mean a linear block code over Z4, i.e. an additive 
subgroup of Z4 . Such codes have been studied recently both in connection with the construction 
of sequences with low correlation ( |^] , , |^ , [|72| ) and in a variety of other contexts (see |^ 
and the references contained therein). 

We define an inner product on Z4 by a-6 = ai^i + • • • + a„6n ( mod 4), and then the notions 
of dual code (C-*-), self- orthogonal code (C C C"*") and self-dual code (C = C"*-) are defined in the 



standard way (cf. |47|, |]5^). For many applications there is no need to distinguish between +1 
components of codewords and —1 components, and so we say that two codes are equivalent if 
one can be obtained from the other by permuting the coordinates and (if necessary) changing 
the signs of certain coordinates. Codes differing by only a permutation of coordinates are called 
permutation-equivalent. The automorphism group Aut(C) of C consists of all permutations and 
sign-changes of the coordinates that preserve the set of codewords. 

Any code is permutation-equivalent to a code C with generator matrix of the form 



G 



Ik, A B 
24^ 2C 



(1) 



where A and C are Z2-matrices and i? is a Z4-matrix. The code is then an elementary abelian 
group of type 4^=12^2^ containing 2^^'^'^^^ codewords. We shall indicate this by saying that C 
has type 4^=1 2^^ or simply that \C\ = A^^2^^ . 

Eq. (0) illustrates a difference in point of view between ring theory and coding theory. 
Quaternary codes are Z4-modules. A ring theorist would point out, correctly, that a quaternary 



code is not in general a free module |41|, and so need not have a basis. Although this is true, 



2A'^ 24, 



(2) 



(|l|) is a perfectly good generator matrix. Encoding is carried out by writing the information 
symbols in the form u = ui • • • Ufc^n^j+i • • • Ufc^+^j' where G Z4 if 1 < i < fci, Ui G if 
ki + 1 < i < ki + k2, and mapping u to the codeword uG. The code C is a free Z4-module if 
and only if A;2 = 0. 

If C has generator matrix (|^), the dual code has generator matrix 

^n~k\ — fc2 

and type ^^-^^-^22^2^ 

2.2. Weight enumerators. 

Several weight enumerators are associated with a quaternary code C. The complete weight 
enumerator (or c.w.e.) of C is 

CWec(W^, X, Y,Z)=Y^ p^no(a);s^ni(a)yn2(a)^n3(a) ^ ^3) 
aGC 



where nj{a) is the number of components of a that are congruent to j (mod 4) (cf. 1^; 
p. 141]). Permutation-equivalent codes have the same c.w.e., but equivalent codes may have 
distinct c.w.e. 's. The appropriate weight enumerator for an equivalence class of codes is the 
symmetrized weight enumerator (or s.w.e.), obtained by identifying X and Z in (|3|): 

swec {W, X,Y) = cwec {W, X,Y,X) . (4) 

The Lee weights of 0,1,2,3 G Z4 are 0,1,2,1 respectively, and the Lee weight wtiio) of 
a G Z4 is the rational sum of the Lee weights of its components. This weight function defines 
a distance d^i , ) on called the Lee metric. The Lee weight enumerator of C is 

aeC 

= swec(T^^VFX,x2) , (5) 

a homogeneous polynomial of degree 2n. Finally, the Hamming weight enumerator of C, less 
useful than the others, is 

Hamc (VF, X) = swec {W, X, X) . (6) 
We then have the following analogues of the MacWilliams identity, giving the weight enu- 



merators for the dual code C (^31' li^l' 

cwec±(TV,X,y,Z) = ^^cwGc{W+X+Y+Z,W+iX-Y-iZ,W-X+Y-Z,W-iX-Y+iZ) , 

(7) 



swec± {W, X, Y) = -^sweciW + 2X + Y,W - Y,W - 2X + Y) , (8) 
1^ I 

Leecx {W,X) = ^^Leec {W + X,W - X) , (9) 

Hamc±(VF,X) = -^Ra.mc{W + 3X,W - X) . (10) 
1^ I 

There are also several analogues of Gleason's theorem, giving bases for the weight enumerators 



of self-dual codes — see |47|, [^] 



2.3. Associated complex-valued sequences. 

We may associate to every Z4-valued vector a = (ai, . . . ,a.„) an equivalent complex roots-of- 
unity sequence s = i"' = (i"^, . . . ,1*^"), where i = \/— 1. Then, given a set C of quaternary 
vectors, we let 

n{C) ={1" : aeC} 

denote the corresponding set of complex sequences. When C is regarded as a set of CDMA 
signature sequences, its effectiveness depends on the complex correlations (or Hermitian inner 
products) of the sequences in 0,{C). When C is regarded as a code, its error-correcting capability 
depends on the Euclidean distance properties of Q{C). If a,b are quaternary vectors with 
associated vectors s = i"", t = i^, then 

\\s-tf = ||sf + - 2 Re {s-^i} 

= 2n - 2 Re {C(a - 6)} , (11) 

where ^ denotes the Hermitian inner product, and 

n 

((a-b) = ^2^""'''" (12) 

r=l 

is the complex correlation of a and b. Note that ^ depends only on the difference a — b. By 
(PH), if the nontrivial correlations of ^1{C) are low in magnitude, then the set possesses large 
minimal Euclidean distance. We also see that 

\\s -tf = 2dLia,b) . (13) 

2.4. Binary codes associated with quaternary codes; the Gray map. 

In communication systems employing quadrature phase-shift keying (QPSK), the preferred 
assignment of two information bits to the four possible phases is the one shown in Fig. 1, in 



which adjacent phases differ by only one binary digit. This mapping is called Gray encoding and 
has the advantage that, when a quaternary codeword is transmitted across an additive white 
Gaussian noise channel, the errors most likely to occur are those causing a single erroneously 
decoded information bit. 



2 ^ 11 o (-1) 




1)" 0^00 
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Figure 1: Gray encoding of quaternary symbols and QPSK phases. 
Formally, we define three maps from Z4 to by 



c 


a(c) 


Pic) 


7(c 














1 


1 





1 


2 





1 


1 


3 


1 


1 






and extend them in the obvious way to maps from to Zg. The 2-adic expansion of c G Z4 
is 

c = a(c) + 2/3(c) . (14) 

Note that a{c) + /3(c) + 7(c) = for all c G Z4. We construct binary codes from quaternary 
codes using the Gray map (p : Z2 ^ Z|" given by 

</.(c) = (/3(c), 7(c)), cGZ^ (15) 

When we speak of the binary image of a quaternary code C, we will always mean its image C = 
(/)(€) under the Gray map. We use script letters for quaternary codes, with the corresponding 
Latin letters for their binary images. 
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C is in general a nonlinear binary code of length 2n. If C is linear, and C is defined by (|^), 
then C has generator matrix 

Ik, A a{B) Ik, A a{B) " 

4, C Ik, C . (16) 
(3{B) Ik, A 7(B) _ 
We say that a binary code C is Jji-linear if its coordinates can be arranged so that it is the 
image under the Gray map cj) of a, quaternary code C. 

The crucial property of the Gray map is that it preserves distances. 

Theorem 1. (p is a distance-preserving map or isometry from 

(Z4 , Lee distance) to (Z2", Hamming distance) . 

Proof. It is easy to see from the definitions (and Fig. 1) that 

wt{(l){a)) = wtiia), a£Z2 , (17) 
d{(l){a),(l){b)) = dL{a,b), a,beZ2, (18) 

where wt{ ) and d( , ) are the usual Hamming weight and distance functions for binary 
vectors. I 

From (p^), ([T^), the Hamming distance between the binary images (j){a) and (/)(6) is pro- 
portional to the squared Euclidean distance between the complex sequences i"" and i^. 

Two other binary codes C^^\ C^"^^ are canonically associated with a quaternary code C. 
These are the linear codes defined by 

C(i) = {a(c) : c G C} , (19) 
C(2) = {/3(c) : c e C, a{c) = 0} . (20) 

If C has generator matrix (||), then C^^^ is an [n, code with generator matrix 

[h, A a{B)] , (21) 

while C(2) D C7(i) is an [n, k\ + k^] code with generator matrix 

4i A a{B) 
h, C 

— compare (p^). It is shown in [ p^ ] that given any binary codes C", C" of length n with 
C" D C", there is a quaternary code C with C^^) = C", C{2) = C". 



(22) 



2.5. Weight and distance properties. 

Since in general C = </){€) is not linear, it need not have a dual. We define its Z^-dual to be 
C± = (j){C-^), as in the diagram 



c = m 



dual 



(23) 



Note that one cannot add an arrow marked 'dual' on the right side to produce a commuting 
diagram. 

In this section we discuss the weight and distance properties of C and Cj_. The principal 
results to be derived here are the following: 

(1) C and Cj_ are distance invariant. 

(2) The weight distributions of C and C± are Mac Williams transforms of one another. 



A binary code C is said to be distance invariant [56, p. 40] if the Hamming weight distri 



butions of its translates u + C are the same for all u £ C. 

Theorem 2. If C is a (linear) quaternary code, then its binary Gray representation C = (j){C) 
is distance invariant. 

Proof. C is distance invariant (with respect to Lee distance) because it is linear, and the result 
then follows from Theorem ||. ■ 
For a distance invariant code C of length n, the (Hamming) weight enumerator 

c'gC 

is independent of c G C. If C = (p{C), it follows from Theorem |l| and (|5|) that 

Ramc{W,X) = Leec{W,X) = swec{W'^ ,WX, X^) . (24) 

Theorem 3. IfC andC^ are dual quaternary codes, then the weight distributions of the binary 
codes C = 0(C) and C±_ = (^(C"*") are related by the binary MacWilliams transform. 



10 



Proof. From (|2§), @ we have 



Hamc^(W,X) = Leec±{W,X) 

= ^^Leec{W + X, W - X) 

= -^RamciW + X,W-X). 

as required. I 

2.6. Existence and linearity conditions. 

We now give necessary and sufficient conditions for a binary code to be Z4-linear, and for tfie 
binary image of a quaternary code to be a linear code. The reader who is primarily interested 
in Kerdock and Preparata codes should skip to Section III. 

Since (j){—c) = (7(c), /5(c)), it follows that if C is Z4-linear then C is fixed under the 'swap' 
map a that interchanges the left and right halves of each codeword: 

a : {Ui U2- ■ -Un Un+l ■ ■ ■ U2n) ^ {Un+1 ' ' ' U2n Ui U2 ■ ■ ■ Un) ■ (25) 

In other words a applies the permutation 

(l,n + l)(2,n + 2)---(n,2n) (26) 

to the coordinates. This is a fixed-point-free involution in the automorphism group of C. 

Theorem 4. A binary, not necessarily linear, code C of even length is T^^-linear if and only 
if its coordinates can be arranged so that 

u,v eC ^u + v + {u + cr(n)) *{v + aiv)) G C , (27) 

where a is the swap map that interchanges the left and right halves of a vector, and * denotes 
the componentwise product of two vectors. 

Proof. This is an immediate consequence of the easily- verified identity 

</>(a + b) = <Pia) + m + (</.(a) + a{<i^{a))) * (</.(&) + aWb))) , (28) 
for all a,6 G ZJ. ■ 

Theorem 5. The binary image (/){€) of a quaternary linear code C is linear if and only if 

a,beC ^2a{a)*a{b) eC (29) 
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Proof. This is an immediate consequence of the identity 

4>{a) + 4>{b) + (f){a + b) = (/)(2a(a) * a{b)) 



(30) 



for all a,b£Z2. 



Theorem 6. A binary linear code C of even length is Zn-linear if and only if its coordinates 
can be permuted so that 



u,v £ C ^ {u + a{u)) * {v + a{v)) G C 

where a is as in Theorem 

Proof. This is also a consequence of (|2^). 



(31) 



Conditions (|29|), (p^) and (31) are very restrictive, and (we are now speaking informally) 
imply that most binary codes are not Z4-linear. 

2.7. Reed-MuUer and Hamming codes 

Theorem 7. The rth order binary Reed-Muller code RM{r,m) of length n = 2™, m >1, is 
7j4-linear for r = 0, 1, 2, m — 1 and m. 

Proof. We leave to the reader the straightforward verification that RM{r, m) is the image under 
(j) of the quaternary code ZRM{r, m — 1) (say) of length 2*""^ generated by RM[r — 1, m — 1) 
and 2 RM{r,m — 1), for r = 0, l,2,m — l,m (with the convention that i?M(— l,m — 1) = 
i?M(m,m - 1) = 0). ■ 

Let (fi, . . . , Vm-i) range over so that RM{r,m— 1) is generated (in the usual way, as 

a binary code) by the vectors corresponding to monomials in the Boolean functions Vi of degree 
< r |]56| , Chap. 13]. Then RM{l,m) is the binary image of the quaternary code ZRM{\,m — \) 
generated by the vectors corresponding to 1, 2vi, . . . , 2vm-i^ and RM{2, m) is the image of the 
quaternary code Zi?M(2, m — 1) generated by 1, ui, Vm-i) 2viV2, 2viV3, . . . ,2vm-2Vm-i- 

For example, the [16,5,8] code RM{1,A) and the [16,11,4] code RM{2,4) are the binary 
images of the quaternary codes with generator matrices 

ZRM{2,3) 
11111111 
00001111 



ZRM {1,3) 




11111111 " 


1 


00002222 


2vi 


00220022 


2V2 


02020202 _ 


2V3 



00110011 
01010101 
00000022 
00000202 
00020002 



1 

Vi 
V2 

2viV2 
2viV3 
2V2V3 



(32) 
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In Eq. (|3l|), if u, v are represented by Boolean functions of degree r, and (n + cr{u)) * {v + 
cr{v)) 7^ 0, then (u + cr{u)) * {v + cr{v)) is a Boolean function of degree 2r — 2. So an rth order 
Reed-Muller code with r < m/2 satisfies ( pl| ) provided r < 2 (which gives an alternative proof 
of part of Theorem 1^, but we conjecture that it does not satisfy ( pl| ) if 3 < r < m — 2. In other 
words we conjecture that if C is a binary Reed-Muller code RM{r, m) with 3 < r < m — 2, 
then there is no permutation of the coordinates of C such that the permuted code is equal to 
4'{C) for some quaternary code C. However, we have found a proof of this only for (m — 2)nd 
order RM codes. 

Theorem 8. The binary code RM{m — 2,m), i.e. the extended Hamming code of length 
n = 2™, is not Ij4-linear for m > 5. 

Proof. Suppose H is a [2"*, 2*" — m — 1,4] extended Hamming code with its coordinates 
arranged so that H = (f)(TC) for some quaternary code TC. We will obtain a contradiction for 
m > 5. The codewords of weight 4 in form a Steiner system 5(3,4,2'") |5^, p. 63]. From 
this it follows without difficulty that 

for m > 4:, H contains codewords of , . 

weight 4 that meet in just one coordinate. 



Let -F be the subcode of H fixed under the swap map o" of (25), and let ■0 be the homomorphism 
H ^ F given by ^p{x) = x + a{x). Then iimp C ]^er^p = F. Since dimker^/; < 2"^~^ — 1, 
dim im tjj > 2^~^ — m. Let E consist of the right-hand halves of the codewords in im tp. 
Then E is a, [2™^^, > 2™"-'^ — m, 2] code, containing say Ai words of weight i. We know from 
Theorem |^ that E is closed under componentwise multiplication. 

Therefore the A2 + A3 words of weights 2 and 3 in ii^ must be disjoint, or else E would 
contain a word of weight 1. Omitting these words from E, we are left with a code of length 
2m-i _ — 3 A3, dimension > 2™"^ — m — A2 — A3, and minimal distance 4. This violates 
the optimality of shortened Hamming codes unless A2 = A3 = and E is itself an extended 
Hamming code of length 2™"^. For m > 5 we now use (^) to deduce that E contains a word 
of weight 1, a contradiction. ■ 

Theorem |8| demonstrates that a binary code can be Z4-linear, even though its dual is not. 
For RAd{l,m) is Z4-linear, while in general its dual, RM{m — 2,m), is not. 
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2.8. The Golay code. 



Since the Nordstrom-Robinson code is Z4-hnear (as we shall see in Theorem [1^ ) and is closely 
connected with the Golay code ([^, p. 73], it is natural to ask if the Golay code itself is 
Z4-linear. 

Theorem 9. The [24, 12,8] Golay code G is not T^^-linear. 

Proof. Suppose on the contrary that G is the binary image of a quaternary linear code G. The 
swap map a (see (|26|)) is a fixed-point-free involution in Aut(G), the Mathieu group M24. It 
is known ([pj|], |22|) that M24 contains a single conjugacy class of such involutions. Therefore, 
without loss of generality, we may suppose that this involution is the map defined by addition 
of the hexacodeword IIujujojuj in the MOG description of G (see ||2^, Chap. 11, §9). In the 
MOG diagram this is the permutation 



1 1 




• • 

/ / 

tf4f 


1 1 


I I 





The diagram specifies the division of the 24 coordinates into twelve pairs, although we do 
not yet know which coordinate of each pair is on the left (in (pS])) and which is on the right. 
Consider the Golay codewords 



u 



Then 



u + a{u) 



11 


11 


00 


11 


11 


00 


00 


00 


00 


00 


00 


00 




00 


11 


00 


00 


11 


00 


00 


11 


00 


00 


11 


00 



01 
10 



10 
10 



11 

00 



00 
00 



11 

00 



00 
00 



V + a{v) 



11 


11 


11 


11 


00 


00 


00 


11 


00 


00 


00 


11 



and {u + a{u))* {v + a{v)) (which by Theorem ^ must be in G) has weight 4, a contradiction. 

III. Cyclic codes over Z4 and Galois rings 
3.1. Galois rings. 



To study BCH and other cyclic codes of length n over an alphabet of size q, it is customary 
to work in a Galois field GF{q''^), an extension of degree m of a ground field GF{q) |5^]. The 
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ground field GF{q) is identified with the alphabet, and the extension field is chosen so that it 
contains an 77,th root of unity. 

A similar approach is used for cyclic codes of length n over Z4, only now one constructs 
a Galois ring GR{4"^) (not a field), that is an extension of Z4 of degree m containing an nth 
root of unity. 



Galois rings have been studied by MacDonald |55|, Liebler and Mena |54|, Shankar [34| 



Sole |67], Yamada |7l|], Bozta§, Hammons and Kumar Q, among others, and of course the 
general machinery of commutative algebra, as described for example in Zariski and Samuel 



|76], is applicable to these rings. We list here some of the basic facts we shall need; proofs may 
be found in the above references. 

Let h2{X) G Z2[X] be a primitive irreducible polynomial of degree m. There is a unique 
monic polynomial h{X) G Z/^lX] of degree m such that h{X) = h2{X) (mod 2) and h{X) 
divides X" — 1 (mod 4), where n = 2*" — 1 (see for example Yamada [^). The polynomial 
h{X) is a primitive basic irreducible polynomial, and may be found as follows. 

Let h2{X) = e{X)—d{X), where e{X) contains only even powers and d{X) only odd powers. 
Then h{X) is given by h{X'^) = ±{e'^{X)-d'^{X)). This is Graeffe's method fT^], |^ for finding 
a polynomial whose roots are the squares of the roots of h2{X). For example, when m = 3, 
n = 7 we may take /i2 = X^ + X + 1. Then e = I, d = -X^-X, e^-d^ = -X^ -2X^ - X"^ + 1, 
so 

h{X) =X^ + 2X^ + X-1 . (34) 

Table I in gives all primitive basic irreducible polynomials of degree m < 10. 

Let ^ be a root of h{X), so that ^" = 1. Then the Galois ring GR{A^) is defined to be 
R = There are two canonical ways to represent the 4™ elements of R (just as there are 

two canonical ways, multiplicative and additive, to represent elements of GF{q^)). 

In the first representation, every element c £ R has a unique 'multiplicative' or 2-adic 
representation 

c = a + 2b , (35) 

where a and b belong to the set 

T = {0,l,C,e,---,e-'} . (36) 

The map r : c 1— > a is given by 

r(c) = c2'", ceR, (37) 
15 



and satisfies 



r(cd) = T{c)T{d) , (38) 
T{c + d) = t(c) + r((i) + 2(cd)2'""' (39) 



(see |7l|). Given c, one determines a from ( |37[ ) and then b from (35) 



In the second representation, each element c & R has a unique 'additive' representation 

m— 1 



^ ^r, Kez^. (40) 



r=0 



For example, if m = 3 and h is given by (|3J), the additive representations for the elements of 
T and 2T are 

element 6o 6i 62 26o 26i 262 



1 1 2 
^ 1 2 

^2 1 2 (41) 
^3 1 3 2 2 2 
^4 2 3 3 2 2 
^5 3 3 1 2 2 2 
12 1 2 2 

This table may be produced (just as for Galois fields) by a (modulo 4) shift register whose 
feedback polynomial is h{X). By using ([35|), the table gives the additive representation of 
every element of R. 

One essential difference between R = GR{A"^) and a Galois field is that R contains zero 
divisors: these are the elements of the radical 2i?, the unique maximal ideal in R (R is a local 
ring). Let fi denote the map R — > R/2R. Then 6 = is a root of h2{X), and we can identify 
R/2R with GF(2™), taking the elements of 0^(2"^) to be 

fi{T) = {o,i,e,e\...,9^-'} . (42) 

We denote the set of regular or invertible elements Rhy R* = R \ 2R. Every element of R* 
has a unique representation in the form ^""(1 + 2t), < r < n — 1, t G T. i?* is a multiplicative 
group of order (2™ — 1)2™ which is a direct product H x £, where H is the cyclic group of 
order 2™ — 1 generated by ^, and £ is the group of principal units of R, that is, elements of 
the form 1 + 2t, t G T. £ has the structure of an elementary abelian group of order 2™ and is 
isomorphic to the additive group of GF{2'^). 
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3.2. Frobenius and trace maps. 

The Frobenius map f from i? to -R is the ring automorphism that takes any element c = a+26 € 
R to 

=a^ + 2b^ . (43) 

/ generates the Galois group of R over Z4, and /™ is the identity map. The relative trace from 
R to Z4 is defined by 

r(c) = c + c-^ + c^' + • • • + c^™"' , c€ R . (44) 

For comparison, the usual trace from GF{2"'') to Z2 is given by 

(c) = c + + c^' + • • • + c^"""' , c G 0^(2"^) , (45) 

and the Frobenius map is simply the squaring map 

/2(c) = c^ cEGF(2-). (46) 

The following commutativity relationships between these maps are easily verified: 

/^o/ = /20/i, (47) 
^ o T = iron . (48) 

In particular, since tr is not identically zero, it follows that the Galois ring trace is nontrivial. 
In fact, T is an onto mapping from R to Z4. The set of elements of R invariant under / is 
identical with Z4. 

3.3. Dependencies among 

For later use we record some results about dependencies among the powers 

(PI) ib^-' lb is invertible for < j < /c < 2"^ — 1, for m>2. Proof. If on the contrary we 
had ± = 2A, A G R, then applying /i we obtain 0^ + 6^ = which contradicts the fact 
that e is primitive in GF{2'^). ■ 

(P2) — ^ for distinct j, fc, I in the range [0, 2™ — 2], for m > 2. Proof. Otherwise, 

after rearranging, we have 1 + = for a ^ b. Squaring gives 1 + 2^" + = but 
applying the Frobenius map gives 

1 + ^2a ^ ^2b^ so 2^'" = 0, a contradiction. ■ 
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(P3) Suppose k, I are in the range [0, 2*" — 2] and i^j,k^l,m>3. Then 

^-^j^ and j = l , 

Proof. Suppose 1 + ^'^ = i^'' + Squaring and subtracting the result of applying the Frobe- 
nius map gives 2^° = 2^^"'"'^. Therefore = ^'''^^ (mod 2), so if we write x = 9°", y = 9^, 
z = 9'^ we have x = yz. But also 1 + x = y + z, so (y + l)(z + 1) = 0, which since 9 is primitive 
in GF{2^) implies y or z = 1. I 

(P4) For odd m > 3, 

f + + + = ^ i = i = A; = / . 

Proof. Suppose + + = —1. Arguing as in the previous proof we obtain x"^ + y"^ = 
{x + l)(y + 1), hence + v'^ = uv, with x = u+l, y = v + l. Substituting v = tu we find 
u^{t'^ + t + 1) = 0. But + t + 1 / in GF{2"^), m odd, since tr{t'^ + t + 1) = m / 0, so 
u = 0, X = 1, therefore a = b = c = 0. ■ 

Properties P2, P3 and P4 are also consequences of the fact that errors of weight < 2 in the 
'Preparata' code can be decoded uniquely, as shown in §5.3. 

3.4. The ring 7^. 

As usual when studying cyclic codes of length n it is convenient to represent codewords by 
polynomials modulo — 1. We identify v = {vo,vi, . . . ,Vn-i) with the polynomial v{X) = 
X]r=o '^rX^ in the ring TZ = Z4[X]/(X" — 1). We must be careful when working with TZ: it is 
not a unique factorization domain — for example — 1 has two distinct factorizations into 
irreducible polynomials in TZ: 

= (X - 1)(X + + 1) 

= {X + i fiX"^ + 2X -1) . 

Note also that every element 1 + 2A, A G -R, is a root of X^ — 1. On the other hand TZ is a 
principal ideal domain: just as in the binary case, cyclic codes have a single generator (the 
proof is given in Calderbank and Sloane, Modular and p-adic cyclic codes, Designs, Codes and 
Cryptography, to appear). 
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IV. Kerdock codes 



The main result of this section is a very simple quaternary construction for Kerdock codes. 
4.1. The Kerdock code is an extended cyclic code over Z4. 



Let h{X) be a primitive basic irreducible polynomial of degree m, as above, and let g{X) be 
the reciprocal polynomial to (X" — 1)/{{X — l)h{X)), where n = 2™" — 1. 

Theorem 10. let /C~ be the cyclic code of length n over Z4 with generator polynomial g{X), 
and let /C he obtained from K,^ by adjoining a zero-sum check symbol. Then for odd m > 3 
the binary image K = (f){JC) of IC under the Gray map (It) is a nonlinear code of length 2™+^, 
with 4"*"*"^ words and minimal distance 2™ — 2^™"^^/^ that is equivalent to the Kerdock code. 
This code is distance invariant. 

Note that /C" has parity check polynomial {X — l)h{X). There are two equivalent generator 
matrices for /C. The first is 

fill 1 ... 1 1 

(49) 



1111 



1 

n-l 



where the entries in the second row are to be replaced by the corresponding m-tuples (60&1 " " " bm-i)' 



(the prime indicating transposition) obtained from ([401) . Alternatively, let g{X) = ^j=Q gjX^ , 

— X]^=o 9j ■ Then the second form for the generator 



5 = 2"^ — m — 2, gj £ Z4, and let goo = 
matrix for /C is 

" goo go gi 
goo go 



gs 

gs-i gs 



(50) 



^oc • • • go gi ■■■ gs 

/C is a code of type 4"^+^. The binary code K^^^ associated with /C (see (^)) is i2M(l,m). 

For example, with m = 3 and h given by (34), we find g = + 2x^ + 2; — 1, so the two 
equivalent generator matrices are 



13 12 10 

10 3 12 10 

1 3 1 2 1 

1 3 1 2 1 



(the second one being read from (|4l|)). 



11111111 
1 1 2 3 1 
1 3 3 3 2 
1 2 3 1 1 

^25 



(51) 



For m = 5, we may take h(X) = X^j^g = ^i=o9i-^^ ^ where ho ■ ■ ■ and go - ■ ■ 

are 323001 and 11120122010303133013212213. 

Kerdock codes contain more codewords than any known linear code with the same minimal 
distance (although we are not aware of any theorem to guarantee this, except at length 16). 
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4.2. Family A. 



If we omit the factor X — 1 from the parity check polynomial for /C^, we obtain a cyclic code 
containing 4™ codewords. Let A denote the family of cyclically distinct vectors obtained from 
this code by deleting the zero vector and failing to distinguish between a vector and any of 
its cyclic shifts. The corresponding collection 0,{A) of complex-valued sequences has been 
studied in |0], |6^, ||7^ as a family of asymptotically optimal CDMA signature sequences 
(referred to as Family ^ in |^). Since the sequences of Q{A) have low values of auto- and 
cross-correlation, the set n{A) also has large minimal Euclidean distance. 



4.3. Trace description of Kerdock code and proof of Theorem IC. 

Theorem 11. The codes fC~ and IC have the following trace descriptions over the ring R. 
(a) c = (co, ci, . . . , Cn-i) is a codeword in K,~ if and only if, for some X £ R and e G Z4, 



Thus 



where 



ct = T{Xe) + e, te{0,l,...,n-l} . (52) 



}C- = {el + u(^) : e e Z4, X e R} , (53) 



= {T{X),T{XO,T{Xe), T{Xe-')) • 

(b) c = (coo, Co, ci, . . . , Cn-i) is a codeword in K, if and only if, for some X £ R and e G Z4, 

Q = r(Ae*) + e, fG{oo,0,l,...,n-l} , (54) 

with the convention that = 0. 

This theorem is essentially equivalent to Theorem 3 of 0. 
Proof, (a) Let C be the code defined by (53). If c{X) is the polynomial form of a codeword 



in C, then c{X){X - l)h{X) = [the all I's vector is annihilated by X - 1 and the v'^^'^ by 
h{X)]. Therefore C C /C~. Since C and /C^ contain the same number of codewords, C = /C^. 
(b) follows because the zero-sum check for e 1 is e and for v^"^^ it is 0. I 



Proof of Theorem IC. We consider an arbitrary codeword c G /C in the form (p4[). We will 



show that ct has 2-adic expansion 

ct = at + 2bt, t € {00,0,1, ... ,n - 1} , (55) 
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given by 

at = triirO^) + A , (56) 
bt = trirje') + g(7r0*) + B , (57) 

where the elements ir, r] € GF{2'^) and A,B £ Z2 are arbitrary, 

{m-l)/2 

i=i 

and we adopt the convention that 9°° = 0. 

Let A = + 2^^^, r, s e {00, 0, . . . , n — 1}, so that 

ct = e + Tie+') + 2r(r+*) = at + 2bt . 
Projecting modulo 2, we obtain 

at = a{e) + tr(7r6'*) , 

where tt = ix{^'^), 6 = To find ftj, we compute ct — cf = 2bt (since at = or 1) and obtain 

2bt = (e-e2) + (T(r+*)-r2(f+*)) + 2er(f+*) + 2T(e'+*) 
= 2/3(e) + 2 ^ (^r+i)2^+2'= ^ 2r((er + ^ )e*) ■ 

0<j<k<m-l 

Thus 

6, = /?(e) + Q(^0*) + tr(7/e*) , 

where rj = ^{eSJ' + 

The next step is to observe that the vectors {bt) and {at + bt) defined by (|56|), (|57|) are the 
left and right halves of the codewords in Kerdock's original definition ([^^; p. 458]). But 
the Gray map (j) sends c to (/3(c), 7(c)) = ((6t), (at + bt)). 

The fact that 0(/C) is distance invariant follows from Theorem ^. ■ 
It is shown in that when m is odd, the family of binary sequences {Q{Tr9^)+tr{ri6^) : rj, tt 
in GF{2^), not both zero} has Gold-like correlation properties, but a larger linear span. 

4.4. The first-order Reed-Muller subcode. 



The vectors for which vr = in (|56D, ( |57D form a linear subcode of /C, with generator matrix 

1 1 1 1 ••• 1 

2 2^ 2^2 ... 2^*^-1 

whose binary image is the first-order Reed-Muller code contained in the Kerdock code. 
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4.5. The Nordstrom-Robinson code. 



The case m = 3 is particularly interesting. The Kerdock and Preparata codes of length 16 
coincide, giving the Nordstrom-Robinson code ([^]; see also [^). This is the unique binary 
code of length 16, minimal distance 6, containing 256 words [^], |^3[. In this case K, is the 
'octacode', whose generator matrix is given in (|5l[). The octacode may also be characterized 



as the unique self-dual quaternary code of length 8 and minimal Lee weight 6 |23|, or as the 



'glue code' required to construct the 24-dimensional Leech lattice from eight copies of the 



face-centered cubic lattice [22, Chap. 24]. Thus the following theorem is a special case of 



Theorem IC 



Theorem 12. The Nordstrom-Robinson code is the binary image of the octacode under the 
Gray map. 



The symmetrized weight enumerator of the octacode is ( p3|| ) 

+ 16X^ + Y^ + UW^Y^ + 112WX^Y{W'^ + F^) ^ 
and the weight distribution of the Nordstrom-Robinson code is then given by (p^). 
4.6. Weight distribution. 

The weight distribution of any Kerdock code is also easily determined from the new quaternary 
description. 

Theorem 13. The binary Kerdock code K = (/>(/C) of length 2"^~^^ (m odd > 3j has the 
following weight distribution: 

i Ai 
1 

2»Ti 2(™~i)/2 2™+i^2™ 1) 

(58) 

2^1 2*^+2 2 

2"* -|- '2^'"^~^) /'^ 2^+1^2™ 1) 

2m+l I 

(cf J^, Fig. 15.7). 
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Proof. This is a slight modification of the argument used in Q to obtain the correlation 
distribution of the associated complex sequences. We assume the codewords c E /C are defined 



as in Theorem 11. As mentioned in §4.5, the words for which vr = (and X ^ R* in (|53D) form 
a first-order Reed-Muller code, and account for the words of weights 0, 2™ and 2"^"*"^. 

We now consider a word v^^"^ G /C^ for A G R*. Let nj = nj{v^^')) (see (^)). We claim that 
there exist 6i, 62 = ±1 so that 

no = 2™-2 - 1 + Ji2('"-3)/2, ^ 2"^-2 _^ j^2('"-3)/2 ^ 

na = 2™-2 - ,5i2(™-3)/2, ns = 2'"-2 - <522('"-3)/2 . 



Let 



Then 



2™-2 

S = ^ j^C-''?^) = 7),Q _ 17,2 + i(ni - 713) . 

j=0 



|5|2 = 2™ + . 
We use properties (PI), (P2), (P3) to rewrite this as 

|5|2 = 2"^-1+ i^'^^^ -S-S . 

But it is easily verified that 

^ i^^-"^ = 

(see 0, p. 1104]), hence 

(5 + l)(S + l) = 2"^ , 

(no - na + 1)^ + (ni - n-if = 2"^ . 
The diophantine equation + = 2™ has a unique solution, so 



We also know that ^(v^'^^) is in the simplex code, so 



(59) 



no-ns = _i±2('"-i)/2 ^ (60) 



m + = 2"^-^ , (62) 
no + n2 = 2'"-^ - 1 . (63) 



m) follows from (|q)-(P). 
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We now consider the four words of /C obtained from el + v^^^ (e = 0, 1, 2, 3) by appending 
the zero-sum check symbol e. For 1 + v^^\ for example, we have 

m = 2™-2 + <5i2(™-3)/2, n2 = 2'"-2 + <522(™-3)/2 , 

713 = 2""-^ - 5i2('"-3)/2, no = 2™-2 _ §^2^m~3)/2 ^ 

which is a word of Lee weight 

Of these four words obtained from v^^\ two have Lee weig ht 2"^ + 2('"-i)/2 and two have Lee 
weight 2"^ -2(™-i)/2. This holds for all 2'^(2'" - 1) words v'^^\ A G R*, and establishes U 

When m is even, m > 2, a similar argument shows that (/>(/C) is a nonlinear code of length 
2m+i^ with 4™+"^ codewords, minimal distance 2*" — 2^/2^ ^nd weight distribution 

i Ai 

1 

2m _ 2^/2 2™ (2™ - 1) 

2m 2™+i(2™ + l)-2 

2m_^2™/2 2™(2™-l) 

2m+l I 

This code is not as good as a double-error-correcting BCH code. 
4.7. Soft-decision decoding of Kerdock codes. 

Although in the theoretical development we make a distinction between the quaternary code 
/C and the associated nonlinear binary code K = (j){IC) (and similarly in Section V between 
V = JC^ and P = 4'{V)), they are really two different descriptions of the same code. For 
instance, a decoder for the quaternary code obviously provides a decoder for the binary code 
and conversely. 

The following is a new soft-decision decoding algorithm for the Kerdock code. This is 
comparable in complexity to previously known techniques that were derived from the binary 
description of the code. 

The idea is to extend the fast Hadamard transform (FHT) soft-decision decoding algorithm 
for the binary first-order Reed-Muller code to the Kerdock code. This provides substantial 



24 



savings over brute-force correlation decoding. Define 

A = {oo,0,l,2, ...,n-l}, n = 2"'-l. 

Brute-force decoding of a received vector {vt ■ t € A} requires the computation of its correlation 
with all possible received signals. In particular, the decoder must compute the correlation 



C(A,5)= 



Vtl 



teA 

for all A = ^'' + 2^'*, r, s G A and all 5 G Z4, and find that pair (A, 6) for which Real{C(A, 6)} is a 
maximum. Computed directly, this technique requires 4'"+i2™ multiplications and 
4m+i(2"i _ 1) additions. 

An immediate reduction in complexity is obtained by writing 

teA 

where we adopt the convention that for / in A, / -|- cxd = 00. The correlation sums -|- 2^**, 6) 
may now be viewed (after some reordering of indices) as times the Hadamard transform 
of the 2™ complex vectors {fti"^^^*^'^-'} of length 2"^. Using the FHT, each of these can be 
computed using ?7t,2™ additions/subtractions. Thus the overall requirement is for about 4"^ 
multiplications (one multiplicand is always a power of i) and m^"^ additions/subtractions. 
This complex-data FHT decoding algorithm is of the same order of complexity as re- 



cently published real-data FHT decoders for the Kerdock codes [||], |29] based on the general 
super-code decoding method of Conway and Sloane ||2^. These real-data algorithms perform 
2"^ FHTs of size 2™+^. Finally, we note that the case m = 3 corresponds to decoding the 
Nordstrom-Robinson code. 

V. Preparata codes 

In this section we show that the binary image of the dual code V = JC^ is a Preparata-like 
code with essentially the same properties as Preparata's original code (yet is much simpler to 
construct). 

5.1. The 'Preparata' code is an extended cyclic code over Z4. 

Let h{X) and g{X) be defined as in §4.1. 
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Theorem 14. LetV~ he the cyclic code of length n = 2"^ — l with generator polynomial h{X), 
and let V be obtained from V by adjoining a zero-sum check symbol, so that V = K,^ . Then 
for odd m > 3 the binary image P = (^(P) ofV under the Gray map ( [7^ is a nonlinear code 
of length I = 2™''"^, with 2'"^™"^ codewords and minimal distance 6. This code is distance 
invariant and its weight distribution is the Mac Williams transform of the weight distribution 
of the Kerdock code of the same length. 



Note that V~ has parity check polynomial g{X), and that (|49|), ( [50| ) are equivalent parity 
check matrices for V. Also "P is a code of type 42™-™-!^ The code P = 4'{V) is the Z4-dual of 
K, and we refer to it as a 'Preparata' code, using the quotes to distinguish it from Preparata's 
original code. It is known that the Preparata code (and P) contains more codewords than any 
linear code with the same minimal distance [|l^]. The binary code P^^^ associated with V (see 
(H)) is RM{m-2,m). 

Proof of Theorem It follows from Theorems ^ and ^ that P is distance invariant and 
its weight distribution is the Mac Williams transform of that of K. By Theorem 24 of [56|, 
Chapter 15, P has the same weight distribution as the original Preparata code. ■ 

Semakov, Zinoviev and Zaitsev had already shown in 1971 that any code with the same 
parameters as the Preparata code must be distance invariant. 

The decoding algorithm given below provides an alternative proof that V has minimal Lee 
weight 6, for odd m > 3. For even m > 2, V contains words of Lee weight 4. For ^ satisfies 

= 1, where i = (2™ - l)/3, and since - 1 G R*, by (PI), + + 1 = q, yielding a word 
of Lee weight 3 in V~ . 

There is one essential difference between P and the original Preparata code. It is known 
that the latter is contained in the extended Hamming code spanned by its codewords. 

Theorem 15. For odd m. > 5, P is contained in a nonlinear code with the same weight 
distribution as the extended Hamming code of the same length, and the linear code spanned by 
the codewords of P has minimal weight 2. 

Proof. The first assertion follows by considering the binary images of the following sequence of 
codes: 

ZRM{1, m) C /C C ZRM{2, ?ti) C • • • C ZRM{2, m)"^ C p C ZRM{1, m)^ . (64) 

For the second assertion we use the fact that V is an extended cyclic code with generator 
polynomial h{X) = ^^^^hjX^ (say). Let /too = —^(1) = il) since /i2(l) = 1- Then V has a 
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generator matrix of the form 



hr 



ho hi 



hoc ho 



hr 







hyn 

hm 

ho • • • h„ 



(65) 



It follows from (^) that the linear span of P = (/){V) contains all words of the form (/){2a{a) * 
a{b)), for a,b V. Taking a and b to be as indicated in (|65|) produces a word of weight 2 in 
the linear span. ■ 
Again there is a result of Zaitsev, Zinoviev and Semakov that is relevant: they showed in 
1 75] that any code with the same parameters as the Preparata code is a subcode of a possibly 
nonlinear code with the same parameter as an extended Hamming code. Theorem |l^ answers 
a question raised in that paper, by providing an example where the Hamming-type code is 
indeed nonlinear. 

As a quaternary linear code, ZRM{1, m)-*- (see (|6^)) is the union of 2™ — 1 translates of V, 
each nonzero translate having minimal Lee weight 4. The codewords of weight 4 in the binary 
image of ZRM{l,m)^ (a nonlinear code with the same parameters an extended Hamming 
code) form a Steiner system S'(3, 4, 2™+^). It is not difficult to show that this ^(S, 4, 2"^+^) is 
identical to the Steiner system formed by the codewords of weight 4 in the classical extended 
Hamming code of length 2™+^. The blocks of this design are divided equally among the binary 
images of the 2"^ — 1 nonzero cosets of V. The blocks falling in the binary image of a fixed 
coset form a Steiner system 5(2,4,2''""'"^). 

5.2. Transform-domain characterization of 'Preparata' codes. 

In spite of the previous theorem, in this section we shall show that the 'Preparata' code P = 
and Preparata's original code have similar characterizations by finite field transforms. 
We define the Galois ring transform c = (c(A)), A = 0, 1, ... ,n — l,n = 2™ — 1, of a 
quaternary sequence c = (q), t = 0, 1, . . . , n — 1, by 

c(a) = cte 



The inversion formula 



t=o 



n-l 



Ct 



xt 



A=0 
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follows in the usual way from the fact that 

n-l 



1 



i^^ 1 

A=0 ^ 



. 



We define the finite field transform a = (a(A)), A = 0, 1, . . . , n — 1, of a binary sequence 
a = (at), t = 0, 1, . . . ,n - 1, by 

t=0 

where 9 € GF{2"^) is the image of £ R after reduction modulo 2 (as in §3.1). We define the 
half- convolution 7i{a, A) G GF(2™) of the sequence d at lag A by 

n{d,X)= a(Ai)a(A2) , 

where Ai, A2 = 0, 1, . . . , n — 1. The summation is a half rather than full convolution because 
we exclude the cases Ai > A2. 

Theorem 16. The quaternary 'Preparata' code V consists of all vectors c = {ct) G Z^, t E 
{00, 0, 1, . . . , n — 1} satisfying the Galois ring transform constraints 

Coo + c(0) = , 

c{l) = . (66) 

Proof. This follows from the definition of the Galois ring transform and the parity check matrix 
for V given in Eq. (|49|). ■ 

Theorem 17. The binary 'Preparata' code P consists of all vectors (6, a + 6) for which a,b G 
satisfy 

a(0) + floo = , 

d(l) = , 
^>(0) + feoo = W(5,0) + 

6(1) = n{d,l) . (67) 



Note that equations (|6q ) are over R, whereas equations (67) are over GF{2 
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Proof. Consider a codeword c = (q) G V, where ct = at + 2bt, t £ {oo, 0, . . . , n — 1}. It follows 
from the previous theorem that 

aoo + 26oo + a(0) + 26(0) = 0, 

a(l) + 26(l) = 0. (68) 

The next step is identify the constraints that (|6^ ) places on a(A), ^(A). Given 
A G {0, 1, . . . ,n - 1}, let 

a(A) = eA + 2/A, where ex, fx ^ T . (69) 
We find fx indirectly, starting from the inversion formula 

n-l 

ai = -^a(A)r"* . 

A=0 

After squaring and also applying the Frobenius map we obtain 

n-l 

at = a\ = Y.elr''' + 2 ex.ex^C^'^^'^^' 



A=0 Ai<A2 

n-l 



and 

«^ = -E(^A + 2/|)e 



-2Xt 



A=0 

n— 1 n—l 

= Y.'lC''' + 2Y,{el + fl)C''' 
A=o A=o 

respectively. Comparing these two expressions, and using the uniqueness of the Galois ring 
transform coefficients, we find 

2(ei + /|) = 2 ^Ai^A^- (70) 

0<Ai <A2<n-l 
Ai + A2 = 2A 

Now ii{ex) = a(A), n{e2x) = a(2A) = a(A)^ = ^i{ex)'^, so ( |70D implies 

0<Ai<A2<n-l 
Ai+A2=2A 

an equation in GF{2^). Taking the square root of both sides we obtain 

li{fx)=n{aA) . (71) 

From (H), (|6|), (|7|) we see that 

Ooo + 26oo + eo + 2/o + 26(0) = , 
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which implies 



floo + M(eo) = floo + a(0) = , 



^ ( + ^oo + n{a, 0) + 6(0) = 

and the first and third equations of (|6^) now follow. The second and fourth equations follow 
easily from the second equation of (|68|) . ■ 
For comparison with (|67|), a transform characterization of Preparata's original code (of the 
same length 2™"^^) can be readily derived from the description given by Baker, van Lint and 
Wilson Q: a vector {b, a + b) is in this code if and only if 

a(0) + floo = 
a{l) = 

b{0) + boo = 

b{lf = a{3). (72) 



The similarity between (67) and (72) is evident. At length 16 (the case m = 3) the two 
descriptions must coincide, since the Nordstrom- Robinson code is unique (see §4.5). This may 
be verified directly as follows. 

Theorem 18. When m = 3 the 'Preparata' code P coincides with Preparata's original code. 

Proof. It is enough to show that 7i{d,0) = aooa(O) and 7i{d,l) = a(3)^/'^ = d(3)^. The 
cyclotomic cosets mod 7 are {0}, {1,2,4} and {3,5,6}. Hence 

a(2) = a(l)^ 5(4) = a(l)^ S(6) = d{3f, a(5) = a(3)^ . 

Since a(l) = and a(0) = Coo are given, we have 

n{d,0) = a(0)2 + a(l)5(6) +o(2)5(5) + a(3)5(4) 

= d{Of = o(0)aoo , 
n{d,l) = a(0)a(l) + a(2)a(6) +a(3)a(5) +a(4)2 

= d(3)a(5) = d(3)^ , 

as required. ■ 
As we have already seen in §4.5, the appropriate quaternary code in the case m = 3 is the 
self-dual octacode. 
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5.3. Decoding the quaternary 'Preparata' code in the Z4 domain. 



There is a very simple decoding algorithm for the 'Preparata' code obtained by working 
in the Z4 domain. This is an optimal syndrome decoder: it corrects all error patterns of Lee 
weight at most 2, detects all errors of Lee weight 3, and detects some errors of Lee weight 4. 
A decision tree for the algorithm is shown in Fig. 2. We use the parity check matrix H given 
in (|49|), and assume m is odd and > 3. 

Let V = {voo^vq, . . . ,Vn-i) G Z^"*"^ be the received vector. The syndrome Hv' has two 
components, which we write as 

n-1 

t = Vj + , 

i=o 

n-1 

A + 2B = ^vje , 

j=0 

where A,B £ T. 



In Theorem 13 we saw that exactly four nonzero weights occur in the Lee weight distribution 
of the quaternary Kerdock code /C = V'^, and hence also in the Hamming weight distribution 
of K. It follows that the covering radius of P is at most 4 ([^]; |]56|1 , Theorem 21 of Chap. 6), 
i.e. the Lee distance dL{v,V) from a vector v G Z^"^^ to V satisfies dL{v,V) < 4. Note that 
t = ±1 if and only if dL(v,V) = 1 or 3. 

Single errors of Lee weight 1 or 2. If t = 1 and S = 0, or if t = — 1 and A = B, we decide 
that there is a single error of Lee weight 1 in column (1, A)'. If t = 1 and i^T^O, orift=— 1 
and A ^ B, then dL{v,V) = 3. If t = 2 and A = 0, we decide that there is a single error of 
Lee weight 2 in column (1,S)'. 

Double errors of Lee weight 2. We begin by supposing that t = and 

A + 2B = X - Y , 

where X,Y gT and X ^Y. Note that A^O since by (PI) X - Y is invertible. We have 

A = X + Y + 2X^"'-'y^'^-' , 
B ^ y + X^-^V^'"" (mod 2) . 



Let x,y,a,b respectively be the images of X,Y,A,B in GF{2™') after reduction mod 2 using 
the map fi. Then 

Oin — l om— 1 

a=x+y , b=y+x y 
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Figure 2: Decoding algorithm for 'Preparata' code 
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which we rewrite as 



a = x + y, {h + yf = xy. 



The unique solution to these equations is y = x = a + }? ja. Note that when 6 = or 

b = a, the double error involves the first column of H. Next we suppose that t = 2 and that 



and so x and y are distinct roots of the equation 

+ aw + 6^ = . 

A necessary and sufficient condition for this equation to have distinct roots is that 

tr(6Va2) = tr{b/a) = 

(see H, Chap. 9, Theorem 15; 

Finally we suppose that t = 2 and 

A + 2B = -X - Y , 

where X,Y £ T, X ^ Y , A ^ 0. We now find that 

a = x + y, {b + af'=xy, 

and so x and y are distinct roots of the equation 



A necessary and sufficient condition for this equation to have distinct roots is that 



A + 2B = X + Y 



where X,Y £ T , X ^Y , A ^ Proceeding as above we find 



a = x + y 



= xy , 



+ au + {a^ + b'^) = . 
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5.4. Quaternary Reed-MuUer codes 



In §2.7 we defined a quaternary code ZRM{r,m — 1) whose image under the Gray map 
(j) is the binary Reed-Muher code RM{r,m), provided r G {0, l,2,m — l,m}. In this section 
we define another quaternary Reed-Muller code, QRM{r,m), whose image under the map a 
is RM(r, m) for all r, and which includes the Kerdock and 'Preparata' codes as special cases. 

Definition. Let QRM(0,m) be the quaternary repetition code of length n = 2™, and for 
1 < r < m let QRM{r,m) be generated by QRM{0,m) together with all vectors of the form 

where j ranges over all representatives of cyclotomic cosets mod 2™ — 1 for which 'wt{j) < r, 
and Xj ranges over R. Then QRM{r,m) is a quaternary code of length n = 2*" and type 4^^, 
where 



k=l+{ ^]+ 



+ 



Theorem 19. 



QRM{l,m) 
QRM{m - 2,m) 
a{QRM{r, m)) 
QRM{r,m)^ 



V , 

RM{r,m) , 
QRM{m - r - l,m) 



(73) 
(74) 
(75) 
(76) 



Proof. (^ follows from Theorem |rT](b), (^ from (|7|), and (|7|) from [||, Chap. 13, §5]. It 
remains to prove (|76|). This follows from the transform domain characterization of QRM (r, m) 
as the set of vectors a for which a{X) = whenever wt{X) < m — 1 — r, and QRM{r, m)-^ as 
the set of vectors for which a(A) = whenever wt{X) < r. (Equivalently, we consider the cyclic 
codes obtained by deleting the first coordinate, and use the fact that the zeros of a code are 
the reciprocals of the nonzeros of the dual code.) I 

5.5. Automorphism groups. 

Consider any system i7 of linear equations over Z4, in the variables c^, x G T (see (^))), that 
includes 



= 

xeT 



(77) 
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^c^x = , (78) 



together with equations of the form 

2(j2c.x''A = 0. (79) 
\xeT J 

Theorem 20. The linear system 0, is invariant under the doubly transitive group G of 'affine' 
permutations of the form 

X — > [ax + b) , 
where a,beT anda^O. The order of G is 2™ (2™ - 1). 

Proof. Repeated apphcation of the Frobenius automorphism (43) to Eq. ([78| ) gives 



Cxx^' = , (80) 

for all j. It now follows from (0), (^) and (|o|) that 

'^c^iax + bf = c^(a^'"x^"' + 6^" + 2a^'"~'6^ 



^ X 



Finally 



E, V ^ om — 1 , om— 1 V > om— 1 

Ca;X + 6 2^ Ca; + 2a'' b'^ ^ = • 

xeT x&T xGT 



2Y,CxKax + bf"'f+' = 2j]c,.(a2'"x2"'+62-) 

xeT xeT 



2 ^ Ca:{ax + 6)^ 

2 j;c,(a2^+V^+i + 62^+^ + a2^ 6x2^ +62^ ax) = 0. 

x£T 



Hence is invariant under G. 



Corollary. Our quaternary Kerdock, 'Preparata', 'Goethals', Delsarte-Goethals and 'Goethals- 
Delsarte' codes are invariant under a doubly transitive group o/ order 2™+^(2'" — l)m generated 
by G, negation, and the Frobenius map (J^^ acting on T . 



Proof. The presence of negation follows from Z4-linearity, the action of G from Theorem ^ 
and the Frobenius map from Eq. (^). 
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Remarks. By the automorphism group Aut(C) of a binary nonhnear code C we will mean 
the set of all coordinate permutations that preserve the code. It is easy to see that if C = (^(C) 
is the binary image of a linear quaternary code C, then Aut(C) is isomorphic to a subgroup of 
Aut(C). 

The automorphism groups of the binary Nordstrom- Robinson, Kerdock, classical Preparata, 



and Delsarte-Goethals codes are known (Berlekamp Q, Carlet [14|, |15], [T^, Kantor |4J, ^]). 
For odd m > 5 these groups have the same orders as those in the Corollary. 

We conclude that, for odd m > 5, the groups mentioned in the Corollary are the full 
automorphism groups of these quaternary codes. (For the 'Preparata' codes we use the fact 
that they have the same automorphism group as their duals.) 

The case m = 3 is exceptional. The quaternary octacode has an automorphism group of 
order 1344 (Conway and Sloane [^]), whereas the group of the binary Nordstrom- Robinson 



code has order 80640 (Berlekamp see also Conway and Sloane pi]]). 
5.6. A new family of distance regular graphs of diameter 4. 

As before, P = 4>{V) = 4>{K,^) denotes our 'Preparata' code of length N = 2™+^, with m odd 
> 3. 

Definition. A Z^-coset of P is the image under (/) of a coset of V in Z^^^. We construct a 
graph Tm on the Z4-cosets of P by joining two cosets by an edge if they are the images of 
cosets X + V, y + V such that x — y + V has minimal Lee weight 1. 

Let n denote the partition of into Z4-cosets of P. Then r„ can be thought of as the 
quotient graph ([^, §11.1.B]) of the A^-hypercube by the partition IT. 

The aim of this section is to show that is distance regular and to compute its distance 
distribution diagram and eigenmatrix P. For this purpose we need certain regularity properties 
of P and n. 

If C is a binary code of length N , its outer distribution matrix B = (Bxj) is the 2^ x (A^+1) 
matrix with typical entry 

B^j = \{yeC: d{x,y) =j}\ 



(Delsarte [^). In other words the rows of B are the weight distributions of the translates of 
C. 



A code C of covering radius r is said to be completely regular [27| if i? contains exactly r + 1 
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distinct rows. A partition H of into cosets is said to be completely regular if all members 
of the partition are completely regular with the same matrix. 

Lemma 1. The covering radius of P is 4- 

Proof. In the previous section we saw that it is at most 4. But P is contained in a code with 



the same weight distribution as an extended Hamming code (Theorem 15), and so by the 
supercede lemma the covering radius is at least 4. ■ 



Lemma 2. The codewords of weight 6 in P form a 3 — (2"^^ , 6, (2™"*" — 4)/3) design 



Proof. The proof of Theorem 33 of Chap. 15 can be used, since it depends only on the 
annihilator polynomial of P. I 

Theorem 21. The Preparata' code P is completely regular. 

Proof. The well-known recurrence relation between the columns of B (|2^, |5^]) has order 4, 
by Lemma ||, and so it is sufficient to check that B^j can take at most five different values for 
fixed X E and < j < 4. If d{x, P) < 2, the fact that P has minimal distance 6 shows 
that Bxj is either or 1. If d{x, P) = 3 then Lemma ^ shows that B^^s = {N — l)/3. Clearly 
Bx,o = = = 0. Finally if d{x, P) = A then B^^o = ^x.i = = 5x,3 = 0. ■ 



As in |25] it will be noticed that P is neither linear, perfect, nor uniformly packed, and so 
(in the notation of Levenshtein [^]) is not a design of Delsarte type (i.e. d > 2s' — 1); P is a 
highly nontrivial example of a completely regular code. Furthermore the Z4-linearity of P and 
the properties of (p show that each Z4-coset of P is completely regular with the same outer 
distribution matrix. Hence H is completely regular. The next result follows immediately from 
Theorems 11.1.6 and 11.1.5 of [^. 

Theorem 22. The graph is distance regular on N"^ vertices with diameter 4 and degree 
N. 

We now proceed to a more detailed study of the parameters of F^. Recall that the valencies 
Vj are the numbers of points at distance j from a given point. The intersection numbers aj, 
bj, Cj are defined in Chapter 4 of |9|. 

Lemma 3. F^ is bipartite. 
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Proof. Let us take a parity check matrix H of the form (|4^) for V. For a coset x + V let Hx' 
be the associated syndrome and let i^{x) be the leading bit of Hx' . Then ly is a map from the 
vertices of Tm onto {0, 1}. Let Xj be the set ^"^{j), j = 0, 1. Since u{x) = 1 if x has weight 
1, two cosets with the same image under i/ cannot have adjacent images in Tm- B 

Lemma 4. If x e Z2 is at distance 4 from P, then B^^i = N{N — 1)/12. 

Proof. From [38| and the fact that P has size 2^ /N^ and four nonzero dual distances d[, d'2, 
d'^, ^4 we obtain 



B 



n4 



4!iV2 11 J 



xA 



The desired result then follows from d[ = {N - VN)/2, 4 = N/2, d'^ = {N + VN)/2, 
d'^ = N. U 

Theorem 23. The valencies ofTm are vq = 1, vi = N, V2 = {^), = = "^^5^- 

The intersection numbers ofVm are bo = N, ci = 1, bi = N—1, C2 = 2, 62 = N—2, C3 = A^ — 1, 
63 = 1, C4 = A^. Furthermore aj = for j = 0, 1, 2, 3, 4. 

Proof. By Lemma F^ is bipartite, hence without circuits of odd length. Therefore aj = 
for < i < 4. 

The intersection numbers add up to the degree, so = bj + cj for < j < 4, and it only 
remains to calculate the Cj. The values of ci and C2 are clear from the double-error-correcting 
character of V. Finally C3 and C4 are computed from the formula of Theorem 11.1.8 of Q 
by observing that eij = B^j if d{x,P) = I. Moreover 63^3 = {N — l)/3 by Lemma I and 
64^4 = A^(A^ — 1)/12 by Lemma ^. The intersection numbers of the A^-cube are well known to 



be Oi 



0, bj = N -j, Cj = j. 



Corollary. The eigenmatrix P for F^ is 





N 


(?) 


N{N - 2) 


N -2\ 


2 


2 


1 


y/N 




A^ 




-1 

N 


1 





~T 





1 

2 


1 









-1 


V 


-A^ 


(?) 


N{N - 2) 
2 


2 / 



Proof See |], §4.1.B, or [||, Proposition 3.17. 
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Remarks. 1) Let Rj denote the jth. class of the association scheme corresponding to Fm,. Then 
Ri + i?3 has only three eigenvalues, A^^, 0, —N'^, and is a strongly regular graph isomorphic to 
the complete bipartite graph Kj\f2/2,N'^/2- It would be interesting to see if R3 is also distance 
regular. 

2) n is a 4-partition design in the sense of |12], |25|. 

VI. Goethals, Delsarte-Goethals, and other codes 

It is natural to wonder how the constructions of /C and V can be generalized. We have 
already seen one generalization in §5.4. Another generalization is to replace ( ^9|) by the matrix 



1 1 
1 
2 



1 

2^3 



022^ 



1+2^ 



1 

e 

2^2(1+2^) 



1 

2^3{n-l) 
2^(l+2J)(n-l) 



2 2^1+2'' 2^2(1+20 ... 2^(l+2'')(n-l) 

where 1 < r < (m — l)/2. Again we assume m is odd. 



(81) 



Theorem 24. (a) The quaternary code of length 2™ with generator matrix (81_) has type 



^m+i2rm minimal Lee weight 2™ — 2™ ^ , where 6 = ^^^^^^ — r. The binary image under 
the Gray map ( [7^ is the Delsarte-Goethals code DG{m + 1, 6) (^^]; j5^/, Chap. 15). (b) The 



dual code, with parity check matrix (81), has a binary image with minimal distance 8 and the 
same weight distribution as the Goethals-Delsarte code GD[m + l,r + 2) defined by Hergert 
l4Cj. In particular, for r = 1 this produces a binary code G with the same weight distribution 



as the Goethals code I{m + 1) §§1, Ghap. 15). 



Proof, (a) Comparing Eqs. (37) and (34) of |56|, Chap. 15, we see that the difference between 
the Kerdock code and the Delsarte-Goethals code comes from the vectors (c, c), where c belongs 



to the code defined by Eq. (31) of that chapter. We already know from Theorem 10 that the 
first two rows of ( |8l| ) produce the Kerdock code, and it is easily seen that the remaining 
rows produce the required (c, c) words, (b) This follows because the Goethals-Delsarte code is 
by construction (see Hergert |^^) a distance invariant codes whose weight enumerator is the 
Mac Williams transform of the Delsarte-Goethals code. The minimal Lee distance of these dual 
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codes is no more than 8, since they contain words of shape 2^, corresponding to the doubles 
of words in the extended Hamming code defined by the binary images of the first two rows of 



(pl|). That the minimal Lee distance is at least 8 follows from Theorem 25 below. ■ 
Remarks. 1) There are also transform-domain characterizations of some of these codes. For 



the 'Goethals' codes and the dual codes defined in part (b) of Theorem add to (67) the 
conditions 

a(l + 2^) = 0, i = l,2, ...,r. 
For the original Goethals codes ^B, p. 477], replace (|7^ by 



a(0) + aoo = , 
a(l) = , 

KO) + boo = , 
~a{r) = 

~a{s) = h{iy , 

where r = 1 + 2*~^, s = 1 + 2*, and a, b are binary vectors of length n = 2^^^^ . 

2) For the automorphism groups of these codes, see Section 5.5. 

3) Our 'Goethals' code is thus defined as G = where Q is the quaternary code with parity 
check matrix 



111 1 

^ I i e 

2 2^3 2^6 



1 

^(n-l) 
2^3(n-l) 



(82) 



We end by giving a direct proof that this code has minimal distance 8. 

Theorem 25. The minimal distance of the 'Goethals' code G = (piQ) of length 2™"^^, m odd 
> 3, is 8. 

Proof. Since Q ^ V, the minimal distance d is at least 6. Suppose, seeking a contradiction, 
that c = (coo,co,...,c„„i) is a codeword of type (±l)"i2"20"+^~"i^"2^ where n = 2"^ - 1, 
ni + 2n2 = 6. Write c = 2co + ci, where 2co is a vector of type 2"2 0"+i^"2 and ci is a vector 
of type (ibl)"iO""'"^~"i . Then ci is orthogonal to every row of the matrix 



1 1 1 
1 i 
1 ^3 



1 

^3(n.-l) 
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and so a{ci) is in the extended double-error-correcting BCH code of length 2™ . It follows that 
712 = and ni = 6, and in fact that c must be of the type l^S'^O"'"^ or ±(1^3 0"~^). 

Case 1. c is of type I'^S^O""^. The automorphism group of Q is doubly transitive on the 



coordinate positions (Theorem 2C), so we may assume Cqq — — 1. Thus c determines a solution 
to the equations 

Xi + X2 + = Zl + Z2 , 
Xf + X| + X| = Zf + zl (mod 2) , 

where Xi, X2, X3, Zi, Z2 are distinct nonzero elements of T. If xi, X2, etc., are the images of 
these elements in GF(2"^) under /i, we have 

Xl + X2 + X3 = Zi+ Z2 , 

I 3 I 3 — 3 I 3 
Xl -\- X2 -\- X^ — Zl -\- Z2 , 

X1X2 + X2X3 + X3X1 = 2:1^2 • 

But this implies 

X1X2X3 = {xi + X2 + xs)^ + {xl + xl + xl) 

+ (xi -I- 2:2 -I- X3)(xi3;2 -I- X2X3 -I- XsXi) 
= {Zi + Z2f + zf + Z2 + ZiZ2{zi + Z2) = 0, 

which is a contradiction. 

Case 2. c is of type 1^3 0"~^. By using the automorphism group we may suppose Cqo = 3, 
Co = 1. Thus c determines a solution to 

X1 + X2 + X3 = -1-Zi, 
xf + X'i + Xl = -1 - zf (mod 2) , 

where Xi, X2, X^, 1, Zi are distinct nonzero elements of T. Proceeding as before we find 

Xl + X2 + X3 = 1 + Zl , 
Xl -\- X2 -|- X3 = 1 -\- Zl , 
X1X2 + X2X3 -I- X3X1 = 1 + Zl + zf . 
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For i = 1, 2, 3 let 2/j = + 1 + zi. This change of variables produces the equations 

yi + ?/2 + ys = , 

vl + vi + yl = zi{l + zi) , (83) 

yiy2 + ?/2?/3 + ysyi = • 

Now write j/2 = ayi, j/s = (1 + a)yi, so that 

yi(a + a^) = zi + , 
+ a + a^) = zi , 

and also yi / 0. It follows that 

yfil + + a^) + yi(a + a^) + (1 + a + a^) = . 

Setting s = a + a^, we obtain the quadratic equation 

.^ + ii±^. + l±^ = 0. (84) 
Vi Vi 

We shall prove that this equation has no solution. First observe that 7^ 1, so the equation 
does not have a double root. Suppose the equation has two distinct roots. It follows from (^) 

1 /2 

that there exist distinct nonzero elements Yi, Y2, I3, Y^', Y3', Z-^^ of T such that 

Yi+Y2 + Y3 = 2Zy^ = Yi + Y^ + Y^ . 

However, this implies the existence of codewords in the 'Preparata' code of type 1^3^ 0"~^, 
which is not the case. Hence ( p4|) has no solutions and the proof is complete. ■ 
We are presently investigating other generalizations of (|49|). 

VII. Conclusions 

The classical theory of cyclic codes, which includes BCH, Reed-Solomon, Reed-Muller 
codes, etc., regards these codes as ideals in polynomial rings over finite fields. Some famous 
nonlinear codes found by Nordstrom- Robinson, Kerdock, Preparata, Goethals and others, more 
powerful than any linear codes, cannot be handled by this machinery. We have shown that 
when suitably defined all these codes are ideals in polynomial rings over the ring of integers 
mod 4. This new point of view should completely transform the study of cyclic codes. 
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